fix(acp): round-trip permission_mode + derive permissionModes from VARIANTS

crates/loopal-acp/BUILD.bazel

@@ -9,11 +9,13 @@ rust_library(
         "//crates/loopal-agent-hub",
         "//crates/loopal-ipc",
         "//crates/loopal-protocol",
+        "//crates/loopal-tool-api",
         "//crates/loopal-tool-invocation",
         "@crates//:agent-client-protocol-schema",
         "@crates//:anyhow",
         "@crates//:serde",
         "@crates//:serde_json",
+        "@crates//:strum",
         "@crates//:tokio",
         "@crates//:tracing",
         "@crates//:uuid",

crates/loopal-acp/src/adapter/lifecycle.rs

@@ -1,23 +1,25 @@
 //! ACP lifecycle handlers: initialize, authenticate.
 
+use loopal_tool_api::PermissionMode;
 use serde_json::Value;
+use strum::VariantNames;
 use tracing::info;
 
 use crate::adapter::AcpAdapter;
 use crate::types::make_init_response;
 
 /// `initialize` result + AgentsMesh extensions: `controlRequest` (runner routes
 /// control-panel actions via `session/control_request`) and `permissionModes`
-/// (AgentsMesh selector renders loopal's modes, not Claude Code's).
-/// `permissionModes` must match `loopal_tool_api::PermissionMode` (SSOT).
+/// (AgentsMesh selector renders loopal's modes, not Claude Code's), derived from
+/// `PermissionMode::VARIANTS` (single source of truth).
 fn init_response_with_extensions() -> Value {
     let mut result = serde_json::to_value(make_init_response()).unwrap_or_default();
     if let Some(obj) = result.as_object_mut() {
         obj.insert(
             "agentsmeshExtensions".into(),
             serde_json::json!({
                 "controlRequest": true,
-                "permissionModes": ["bypass", "ask_dangerous", "ask_any_write"],
+                "permissionModes": PermissionMode::VARIANTS,
             }),
         );
     }

crates/loopal-acp/src/translate/panel.rs

@@ -72,6 +72,11 @@ pub(crate) fn translate_panel(
             "thinking",
             serde_json::json!({ "thinking": thinking_config }),
         ),
+        AgentEventPayload::PermissionModeChanged { mode } => ext_notification(
+            session_id,
+            "permission_mode",
+            serde_json::json!({ "permission_mode": mode }),
+        ),
         _ => return None,
     };
     Some(AcpNotification::Extension { method, params })

crates/loopal-tool-api/BUILD.bazel

@@ -13,6 +13,7 @@ rust_library(
         "@crates//:schemars",
         "@crates//:serde",
         "@crates//:serde_json",
+        "@crates//:strum",
         "@crates//:thiserror",
     ],
     proc_macro_deps = ["@crates//:async-trait"],

crates/loopal-tool-api/src/permission.rs

@@ -7,8 +7,11 @@ pub enum PermissionLevel {
     Dangerous,
 }
 
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Default, Serialize, Deserialize)]
+#[derive(
+    Debug, Clone, Copy, PartialEq, Eq, Default, Serialize, Deserialize, strum::VariantNames,
+)]
 #[serde(rename_all = "snake_case")]
+#[strum(serialize_all = "snake_case")]
 pub enum PermissionMode {
     #[default]
     Bypass,